This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61a36080-81cf-3c31-9ffe-5c5ad3097eb6.roa
File: 61a36080-81cf-3c31-9ffe-5c5ad3097eb6.roa (raw, json)
Hash identifier: q4EXH649SN9FKec5rgqH0bk6FCRIbclz+NqWUtUh+Aw=
Subject key identifier: 9B:AA:5F:8B:BA:22:1C:70:A2:D9:F5:C4:86:1E:4D:03:4C:D5:69:C3
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BCC3596A992735A638EE37E20
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61a36080-81cf-3c31-9ffe-5c5ad3097eb6.roa
Signing time: Sun 09 Nov 2025 02:00:31 +0000
ROA not before: Sun 09 Nov 2025 02:00:31 +0000
ROA not after: Sat 07 Feb 2026 02:00:31 +0000
asID: 31898
IP address blocks: 129.153.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cc:35:96:a9:92:73:5a:63:8e:e3:7e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 9 02:00:31 2025 GMT
Not After : Feb 7 02:00:31 2026 GMT
Subject: CN=1e86177b-b97b-4e5f-83ea-65dd3487de3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:39:fd:14:8e:a2:59:12:27:3d:da:be:f3:b0:
20:d0:93:c8:ab:82:40:e1:dc:34:27:30:09:45:17:
85:f1:b7:d6:03:0d:70:0e:94:95:1d:79:df:d8:82:
76:f1:89:26:48:e2:a7:7b:db:51:60:2d:b7:c6:12:
77:18:3a:95:d1:2b:77:75:c8:59:5c:6f:47:2c:f8:
f3:a3:f4:6d:e4:ec:d0:74:22:fb:76:c5:3e:d9:4a:
50:29:88:6b:16:aa:70:4a:a6:36:6f:45:9e:a2:56:
81:13:4c:91:4e:bd:08:2b:1f:29:41:1b:d1:82:ed:
4b:83:9c:c0:9f:dc:0a:a4:55:17:26:53:99:77:45:
ee:19:37:b3:6c:57:e6:1a:82:34:19:55:74:3c:8a:
f2:8e:c8:a1:e3:3e:73:c8:50:ef:e6:d0:5b:75:9b:
18:f8:1e:0e:8a:6b:18:30:03:09:c3:6d:28:b5:65:
bb:07:4f:63:d7:09:4c:ba:79:e4:ee:16:88:de:a0:
3b:47:10:8f:e9:03:70:99:a9:d9:9a:54:be:24:3f:
47:63:6f:33:cf:a2:9b:d4:8a:15:fb:cd:1a:30:71:
f9:fb:cb:cb:f5:43:8e:92:7a:b8:46:95:62:1a:97:
a4:89:7a:56:9f:5e:c6:f2:ca:04:85:24:ab:7b:9c:
e2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AA:5F:8B:BA:22:1C:70:A2:D9:F5:C4:86:1E:4D:03:4C:D5:69:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61a36080-81cf-3c31-9ffe-5c5ad3097eb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.153.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:6f:41:99:c4:56:87:88:c7:2e:d2:8f:18:72:d6:2c:74:bb:
bb:b3:dc:a2:36:6b:cf:50:53:60:1f:78:5c:6d:6a:f8:a1:34:
e3:4a:38:06:e4:89:0d:38:8b:c0:45:2f:e4:e2:1f:db:03:07:
c0:15:7d:6c:60:66:a5:5c:d8:52:8b:7e:b6:30:66:97:1d:bb:
c0:15:8f:f2:20:e0:3a:c6:44:cf:af:ec:f5:57:c8:c0:c8:8e:
23:2e:cf:6a:f0:df:92:59:c3:72:36:9f:e7:b6:0b:d2:55:f0:
93:6c:d5:23:17:87:4a:39:6c:71:f3:99:2b:3c:59:19:e0:d1:
2d:4b:6b:5a:03:62:95:50:5a:68:04:84:a6:77:63:da:e2:ae:
b8:c0:2b:23:bd:85:1b:68:b8:55:28:fd:3a:6b:95:de:4f:e8:
44:41:f3:0e:05:f1:cd:4a:21:2a:a9:66:52:c9:1c:19:ba:c7:
be:38:b0:dc:b0:c8:f8:32:c9:47:ed:48:be:3f:f4:94:62:5f:
0a:04:ef:13:ea:5e:df:9a:fe:db:f8:70:3d:6c:64:b5:ea:40:
4d:1a:b3:b1:75:dd:c7:33:9e:47:64:52:9e:e2:80:7f:15:7d:
09:7e:f9:7b:0e:cf:f6:ab:2f:5d:05:e8:22:75:f5:27:c6:a3:
90:c7:d7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:46:44 2025 by rpki-client